Is it possible to get expiry notification from Key vault for custom Import certs?

Question

Hello,

When we import custom certificate(created by organization), is it possible receive expiry notification from Azure key vault for them.

If not then is it possible to build some custom logic for it.

Please suggest. Thank you.

Answer 1

As long as you're storing it as a certificate (rather than a secret), then yes.

Certificate policies allow the notification to Certificate Contacts.

See this cmdlet for one way of adding Contacts to a certificate. https://learn.microsoft.com/en-us/powershell/module/az.keyvault/add-azkeyvaultcertificatecontact?view=azps-10.0.0

---

If your certificate is being used on a public web app, then another option could be to use Application Insights SSL checking.